Re: Return delivery notice w/o attachment

P_at_m
Date: 10/06/03


Date: Sun, 5 Oct 2003 15:08:11 -0700

Hi Bruce: I'm a little stumped with your reply. Unfortunately, I'm
'pretty' familiar with the ins and outs of Swen, wish I wasn't, however,
this wasn't what I asked. Normally your replies are right to the point, but
this wasn't what I asked. Thanks for your time anyway, though, you've
helped me before and I appreciate your time and knowledge. I think I've
read this particular post at least a couple of hundred times. It's still
good info for those in need of an explanation of where these emails are
coming from or not coming from. Fortunately, I've always known that MS
doesn't send unsolicited emails or emails with links to patches, because I
read, read, read ;-}

Pam
"Bruce Chambers" <bchambers@nospamcableone.net> wrote in message
news:vo1153l2ef1r69@corp.supernews.com...
> Greetings --
>
> What you received is either a very common malicious hoax or the
> output of a computer infected by one of several wide-spread, mass
> emailing worms. The most widely-known are:
>
> W32.Swen.A_mm
> http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html
>
> W32.Dumaru_mm
> http://securityresponse.symantec.com/avcenter/venc/data/w32.dumaru@mm.html
>
> W32.Gibe_mm
> http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.html
>
> Microsoft never has, does not currently, and never will email
> unsolicited security patches. At the most, if, and only if, you
> subscribe to their security notification newsletter, they will send
> you an email informing you that a new patch is available for
> downloading.
>
> Microsoft Policies on Software Distribution
>
http://www.microsoft.com/technet/treeview/?url=/technet/security/policy/swdist.asp
>
> Information on Bogus Microsoft Security Bulletin Emails
>
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/news/patch_hoax.asp
>
> How to Tell If a Microsoft Security-Related Message Is Genuine
> http://www.microsoft.com/security/antivirus/authenticate_mail.asp
>
> Any and all legitimate patches and updates are readily available
> at http://windowsupdate.microsoft.com/. (Notice that this is the true
> URL, rather than the bogus one that may have been contained in the
> email you received.) Any messages that point to any other source(s) or
> claim to have the patch attached are bogus.
>
> You're receiving these emails because your email address is in
> the address book of someone infected with a worm, and/or because you
> posted your real email address somewhere on-line, either in a forum
> accessible to the public and spambots, such as Usenet, or on an
> untrustworthy web site that subsequently sold your address as part of
> a mailing list. One thing you can do is notify _everyone_ with whom
> you've ever corresponded via email that one or more of them may be
> infected with a mass emailing worm, and should take the appropriate
> steps.
>
> There's probably no way of blocking all of the bogus messages, but
> you can greatly reduce the number you get by creating a rule, based
> upon the most commonly used subject lines, to delete the emails from
> the server without ever downloading them.
>
>
> Bruce Chambers
>
> --
> Help us help you:
> http://dts-l.org/goodpost.htm
> http://www.catb.org/~esr/faqs/smart-questions.html
>
> You can have peace. Or you can have freedom. Don't ever count on
> having both at once. -- RAH
>
>
> "P@m" <pfloresatcharterdotnet> wrote in message
> news:uUBcZl3iDHA.1716@TK2MSFTNGP12.phx.gbl...
> > Hi:
> >
> > I remember someone asking this question, but I don't know if they
> ever got
> > an answer. If they did, could someone explain it again.
> >
> > I rec'd 13 return delivery notices (Swen) today that are 143 KB in
> size, but
> > there are no attachments anywhere within the email. Why would this
> file be
> > so large, if there is only 1 sentence or so of text in the body?
> They're
> > not being downloaded from my server, because I established a rule to
> block
> > all files over 100KB. These emails, and the MS ones, had stopped
> for a week
> > now, but returned this morning. The same thing happened last
> > Sunday--probably means nothing.
> >
> > Pam
> >
> >
>
>



Relevant Pages

  • Re: MS Patch.exe - Virus Problem?
    ... emailing worms. ... Information on Bogus Microsoft Security Bulletin Emails ... infected with a mass emailing worm, ...
    (microsoft.public.security.virus)
  • Re: viruses
    ... emailing worms. ... Information on Bogus Microsoft Security Bulletin Emails ... infected with a mass emailing worm, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: email from microsoft
    ... because I did post my real email at one time. ... >wide-spread, mass emailing worms. ... >Information on Bogus Microsoft Security Bulletin Emails ...
    (microsoft.public.security.virus)
  • Re: Suspect E-mail Virus
    ... emailing worms. ... Information on Bogus Microsoft Security Bulletin Emails ... infected with a mass emailing worm, ...
    (microsoft.public.security.virus)
  • Re: OE Attachments Not Opening
    ... emailing worms. ... Information on Bogus Microsoft Security Bulletin Emails ... We are receiving many undeliverable e-mail messages ...
    (microsoft.public.security.virus)